Mandatory information according to Art. 12 ff. GDPR

for the processing of personal data of contact persons

Verantwortlicher Betreiber

Wiegand Erlebnisberge GmbH
Landstraße 12
36169 Rasdorf
Telefon: 06651-9800

E-Mail: post@wiegand-erlebnisberge.de
Internet: www.wiegand-erlebnisberge.de

Geschäftsführung Wiegand Erlebnisberge GmbH: Hendrik Wiegand, Pamela Groll

Datenschutzbeauftragte des Verantwortlichen

BerIsDa GmbH
Daniel Dreijalts
Petersberger Straße 57a
36037 Fulda
Deutschland

Tel.: 0661 29 69 80 90
E-Mail: datenschutz@berisda.de

1. description and scope of data processing

Various contact forms are available on our website which you can use to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored.

Mandatory fields:

Salutation | First name | Last name | E-Mail

Optional fields:

Address (street/house number/zip code/town) | Telephone number | Question/comment

Mandatory fields:

First name | Last name | E-mail | Question

Mandatory fields:

Salutation | First name | Last name | E-mail | Error message

Mandatory fields:

Salutation | First name | Last name | E-mail | Telephone number | Number of participants | Date | Time

Optional fields:

Questions | How did you hear about us?

Mandatory fields:

Salutation | First name | Last name | E-mail | Telephone number | Number of participants | Date | Time

Optional fields:

What do you want to rent? | Questions | How did you hear about us?

Mandatory fields:

Selection question depending on job | first name | last name | e-mail | telephone

Mandatory fields:

Salutation | First name | Last name | E-mail | Telephone number | Number of participants | Date | Time

All other fields are optional.

Mandatory fields:

Salutation | First name | Last name | E-mail | Desired date | Expected arrival time | What is the birthday child's name? | How many children want to celebrate?

All other fields are optional.

Mandatory fields:

Salutation | First name | Last name | E-mail | Desired date | Expected arrival time | What is the birthday child's name? | How many children want to celebrate?

All other fields are optional.

In addition, the following data is stored when the forms are used:

  1. IP address of the user
  2. Website language
  3. Browser data (language, country, device type, ID)
  4. Date and time of contact

For the processing of the data, reference is made to this data protection information as part of the sending process. The data is used exclusively for processing the conversation.

2. legal basis for data processing

The legal basis for the processing of data transmitted via the contact form is Art. 6 para. 1 sentence 1 lit. f GDPR. If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR; if the user is the contact person of a (potential) business partner (customer, supplier, partner), the legal basis for (pre-)contractual measures is Art. 6 para. 1 sentence 1 lit. f GDPR.

In the event that we request several contact options from you as mandatory fields (telephone number and e-mail address), this relates to our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest is based on the fact that we want to ensure communication with you even if you have entered incorrect data and can reach you at short notice if necessary. If you do not wish to enter a telephone number, you are welcome to enter an obviously unavailable telephone number (e.g. +49 (0) 6651-123456789).

The legal basis for the processing of all other personal data processed during the sending process, which is transmitted via the contact form, is Art. 6 para. 1 sentence 1 lit. f GDPR.

3. purpose of data processing

The processing of the personal data from the input mask serves us solely to process the contact. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems. Our legitimate interest also lies in these purposes.

4. recipient of the personal data

Within our organization, access to your personal data is generally granted to those departments and divisions that require it within the scope of our activities and for the purposes described in each case and that are authorized to process this data. In addition, your data may be forwarded to other companies within our group of companies to process your request.

As part of our service provision, we commission processors who contribute to the fulfillment of contractual obligations. We work together with service providers, such as service providers for hosting or website design (so-called processors). These service providers only act in accordance with our instructions and are contractually obliged to comply with the applicable data protection requirements. To this end, we conclude corresponding order processing contracts with these service providers in writing.

We may transfer personal data to courts, supervisory authorities or law firms if there is a legal obligation to do so in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR or if it is necessary for the assertion, exercise or defense of legal claims in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR and there is no reason to assume that our data subjects have an overriding interest worthy of protection in not disclosing the data.

5. duration of storage, right of objection, revocation and removal

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input screen of the contact form, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

If a user contacts us via the form, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.